Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f56d6b18-3907-3f28-ba4d-0d73a465ccdd.roa
File:                     f56d6b18-3907-3f28-ba4d-0d73a465ccdd.roa (raw, json)
Hash identifier:          TsdQaPLtctYiputUHnVWOYKQm8Lxxki+5xBzL/83cfY=
Subject key identifier:   46:D3:41:44:50:82:70:1C:DB:B6:BD:13:D3:24:FE:16:A6:87:E0:80
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F49736FB02845CD6EA41DD380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f56d6b18-3907-3f28-ba4d-0d73a465ccdd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1017:a420::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:6f:b0:28:45:cd:6e:a4:1d:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8ce58b2b-52e1-4370-9d45-ebe8a2d499bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a3:e0:c9:1e:7e:4c:88:72:b5:ed:e5:32:97:
                    bf:a5:1d:2e:18:b7:65:e6:5e:48:c1:fe:7b:11:da:
                    a7:2e:7c:c2:d2:67:b5:b7:5f:e4:fb:c7:d7:bb:56:
                    ea:cd:a7:05:68:05:2a:4c:8d:61:2e:f0:d1:68:ce:
                    59:c2:5f:0b:a4:43:fd:ad:5b:1a:f3:be:a2:35:ca:
                    87:da:0f:e5:51:51:80:ee:aa:d2:84:82:b5:fa:ad:
                    91:35:31:36:df:05:3c:53:e1:37:a2:ad:de:f1:8e:
                    f2:68:5b:0d:a0:c0:32:b0:99:a7:d5:05:af:03:0c:
                    03:87:74:c4:1a:e9:36:d5:fe:fd:55:c0:c8:75:12:
                    d7:39:5a:33:db:ef:fa:e7:7e:cb:65:96:f1:56:e8:
                    50:d5:34:e2:c0:c4:86:1f:a4:2a:0f:21:f8:b6:62:
                    ce:20:3c:4c:2a:57:20:06:1a:e5:d9:1e:76:64:84:
                    a9:6d:6d:fa:a2:ff:6f:b7:19:c6:57:11:66:29:80:
                    b3:fc:af:50:fa:b4:a3:ef:80:e1:16:3a:f3:f3:6e:
                    27:05:62:ed:ca:d3:4b:06:db:f5:8b:8b:51:63:09:
                    55:17:c9:52:b8:bb:a4:32:3c:27:93:21:97:d2:ce:
                    67:6f:58:93:b5:ff:a8:c1:19:d5:01:50:11:a1:24:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D3:41:44:50:82:70:1C:DB:B6:BD:13:D3:24:FE:16:A6:87:E0:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f56d6b18-3907-3f28-ba4d-0d73a465ccdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:a420::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:bf:48:70:f2:16:35:5c:ed:30:80:27:f4:40:2b:31:4e:cd:
         38:f7:11:3d:ba:c8:e7:e5:2a:b2:85:ed:1e:7e:07:bf:ae:8a:
         af:47:48:a6:4e:db:a9:90:8d:4e:7b:a9:ff:cd:32:05:be:ae:
         5a:1a:41:81:21:46:0f:d1:38:b0:f9:a1:ac:55:9d:1c:4e:d1:
         45:d4:30:f0:56:35:f3:51:9b:0e:13:e9:63:8e:c5:19:13:53:
         d7:16:e6:6d:1f:2d:3b:0b:d8:59:90:16:ec:87:8b:be:b4:06:
         22:be:64:9b:ba:f2:71:0c:d9:9b:26:fc:34:2b:12:54:f5:20:
         c9:aa:a1:47:17:f8:8a:d9:72:75:3c:a2:8f:09:3e:62:2d:28:
         4e:ba:da:e0:fe:fb:d2:92:f0:36:af:ea:ce:e8:0f:ad:4b:b9:
         fc:39:20:41:b3:cb:02:48:82:d5:b9:f0:b8:12:52:89:2f:85:
         a3:b3:52:91:a4:f9:a3:73:c9:4b:b6:12:03:66:a8:74:c9:e1:
         9d:a5:55:e6:5d:dd:06:59:58:5b:04:d0:30:5f:4d:c4:3f:5a:
         b2:60:e4:cf:d2:5e:d4:fa:35:f3:56:28:1a:e8:7e:50:e2:c9:
         4b:3f:76:fb:fd:23:fb:ef:be:4d:eb:85:49:93:ed:35:25:f1:
         29:d4:5b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:36:04 2026 by rpki-client